Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: S7GDHb32cuPnrZwSHMg8E1cME8Gu/AavTPNRl/PoMLs=
Subject key identifier: 51:0F:87:D0:71:CF:74:5E:AB:C4:93:AD:CA:A7:5A:BC:FF:D2:F8:F7
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 0194BBCE0CF093348773EE34160F5CF2213B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: ytSG4ZRq9k7Jp5WprOtIeCIrF7Qn6ntDDIvU8gYOB9c=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:f0:93:34:87:73:ee:34:16:0f:5c:f2:21:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=510f87d071cf745eabc493adcaa75abcffd2f8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:5e:8f:71:c4:75:95:89:94:62:3f:6b:ca:
86:70:62:d3:5e:48:f7:84:81:8b:65:ba:e7:f1:13:
aa:c6:c9:1d:cb:44:5d:3a:83:e9:fb:17:aa:d2:8e:
12:0a:97:21:85:45:53:61:35:a7:d3:17:f4:71:9b:
6a:a4:7d:14:bf:31:87:2a:ae:18:a4:e3:a4:53:3d:
a8:23:77:41:db:a7:90:8e:1b:49:07:69:4a:3c:ba:
31:59:47:f6:29:a0:bf:d5:8f:3d:fa:79:fd:4c:43:
32:bc:79:90:4a:7e:80:c1:d3:f6:b3:6c:1e:15:b1:
3a:f0:a9:4f:c9:6d:9f:9b:58:34:81:8e:a3:ab:15:
90:f6:16:50:db:c9:a6:42:bb:53:fe:6b:a4:d2:f1:
d3:8b:e3:70:0e:36:27:9f:3b:ae:61:83:f1:8e:77:
4e:67:79:77:96:9c:2a:06:a8:75:3d:27:fd:4a:55:
02:77:24:12:1c:42:f0:9a:88:1e:91:ea:51:06:6b:
be:c1:21:98:3e:ad:81:e4:4c:37:9d:b4:11:72:8d:
8e:d9:86:84:28:de:b9:51:e7:1f:a0:d7:ff:27:1d:
af:2f:1e:1a:b9:75:22:8a:43:c0:b9:3a:55:af:52:
15:cd:d9:5c:d5:43:67:64:79:c4:40:f7:c3:71:7e:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0F:87:D0:71:CF:74:5E:AB:C4:93:AD:CA:A7:5A:BC:FF:D2:F8:F7
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:65:0c:95:20:8f:dd:ae:56:b8:1c:50:e1:16:20:23:69:02:
30:ca:df:25:63:2d:2e:c2:06:59:3f:aa:a9:31:f3:31:5c:64:
74:ca:69:e6:b3:0e:af:dd:12:fc:37:3f:c3:e6:02:78:be:e3:
8a:28:27:b1:8a:c3:65:b6:c0:19:6d:c3:57:a8:ec:a7:37:32:
03:8f:93:55:b0:98:cf:65:cf:98:2c:56:9e:81:a6:df:13:23:
33:2f:ee:6f:47:41:a8:d7:f1:4c:38:c5:6a:37:db:53:ad:93:
1f:45:7a:de:fc:bc:c2:cd:72:0b:d7:ff:63:ea:9a:85:31:83:
49:4e:aa:09:ee:18:be:14:61:4d:2e:85:63:4d:c1:2f:26:52:
dd:7c:92:dd:e0:d8:11:d4:40:f7:93:8f:a4:e3:bd:0a:07:81:
3a:62:9d:e1:fd:90:11:d7:ab:13:02:a1:c8:be:c0:c5:70:ba:
3b:ae:e6:9d:32:e0:1d:ff:ba:4b:61:9a:e3:e3:58:07:3c:2c:
e4:e3:d5:3f:62:8f:0f:56:ec:64:0c:00:6f:2b:67:8d:04:c2:
af:0a:38:64:d6:70:c2:85:88:d9:39:2a:fc:e4:e0:13:a0:b2:
79:c8:36:3b:67:a9:54:36:2b:80:84:b9:99:92:0c:f8:a5:1b:
7e:88:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:57 2025 by rpki-client